CVE-2013-2141

CVE-2013-2141 affects the Linux kernel; the do_tkill function in kernel/signal.c of kernels before 3.8.9 does not initialize a data structure, enabling local attackers to read sensitive kernel memory via crafted tkill/tgkill calls. Affected contexts are documented in MiracleLinux/OpenVAS advisori...

CVE-2024-46808

CVE-2024-46808 affects the Linux kernel component drm/amd/display, where a missing NULL pointer check in dpcd_extend_address_range can lead to an assertion if kcalloc returns NULL. The connected Nessus entry confirms the vulnerability exists in Linux distros without a vendor patch and cites the s...

CVE-2024-46824

Summary (CVE-2024-46824) The connected MiracleLinux/MiracleLinux AXSA advisory AXSA:2024-9508:43 for MiracleLinux 9 ( kernel 5.14.0-503.14.1.el9_5 ) explicitly lists CVE-2024-46824 among the vulnerabilities. The advisory notes that the issue affects iommufd: drivers must supply the cache_invalida...

CVE-2024-49956

CVE-2024-49956 : In the Linux kernel, the gfs2 subsystem could call destroy_workqueue() twice during error handling. Specifically, when gfs2_fill_super() fails, destroy_workqueue() is invoked inside gfs2_gl_hash_clear(), and the code path may destroy the same workqueue again. The root cause is a ...

CVE-2024-50119

CVE-2024-50119 affects the Linux kernel CIFS client: the issue is a warning that occurs when destroying cifs_io_request_pool, which is not created by mempool_create. The resolution is to revert the pool with mempool_exit() instead of mempool_destroy, per the vulnerability description and linked k...

CVE-2024-50129

CVE-2024-50129 affects the Linux kernel in the net/pse-pd path, where an out-of-bounds access could occur when iterating PI structures. The fix tightens the loop limit so the code no longer accesses pcdev->nr_lines, which was allocated as exactly that many PI structures. This bounds-checking c...

CVE-2024-50213

CVE-2024-50213 pertains to the Linux kernel’s DRM HDMI test path. The issue is a memory leak where a mode object allocated by drm_mode_duplicate() during drm_display_mode_from_cea_vic() is not freed. This leak was observed when loading drm_hdmi_state_helper_test via modprobe and then removing it,...

CVE-2024-50239

The CVE-2024-50239 issue is tied to the Linux kernel driver for Qualcomm QMP USB (legacy) where data initialization was removed from probe, causing a NULL pointer on runtime suspend in the qcom-qmp-usb/ qmp-usb-legacy path. The fix restores the driver data initialization at probe to prevent the N...

CVE-2024-56541

The CVE-2024-56541 entry concerns the Linux kernel wireless driver ath12k (wifi) where a use-after-free occurs during module removal. Specifically, ath12k_core_deinit() calls ath12k_mac_destroy() which unregisters ah->hw from mac80211 and frees ah->hw and related ar structures; then ath12k_...

CVE-2024-56750

CVE-2024-56750 : Linux kernel — erofs filesystem vulnerability. The issue occurs when mounting file-backed filesystems with an EROFS block size smaller than PAGE_SIZE, where EROFS previously called sb_set_blocksize() and could panic if bdev-backed mounts were not used. The fix directly adjusts s_...

CVE-2024-57952

CVE-2024-57952 relates to the Linux kernel libfs offset directory handling. The offset allocator stores next_offset and normally increments, but can wrap (notably on 32-bit LONG_MAX), after which readdir/getdents may fail to list existing entries because offset_readdir stops when an entry’s offse...

CVE-2024-58077

CVE-2024-58077 affects the Linux kernel ASoC: soc-pcm path. The root cause is invoking soc_pcm_ret() on the .prepare callback, which previously ignored -EINVAL to avoid user-space DoS via logs. The fix changes behavior to stop using soc_pcm_ret() in the .prepare callback, addressing the invalid-p...

CVE-2025-21849

CVE-2025-21849: Linux kernel drm/i915/gt had potential deadlocks due to spin_lock/unlock() used in interrupt contexts. The fix saves irq state before acquiring locks. Version history shows v2 adds irq state save/restore around signal_irq_work locks; v3 uses spin_lock_irqsave() in guc_lrc_desc_unp...

CVE-2025-21890

Technical details about CVE-2025-21890 are not publicly disclosed in the provided connected documents. The initial description notes a fix in the Linux kernel idpf driver, but further specifics (affected versions, exploitability, mitigations) are not included here. Monitor for updates.

CVE-2025-21923

Summary of CVE-2025-21923 (Linux kernel): The vulnerability affects the HID subsystem, specifically the hid-steam driver. When detaching a hid-steam device, the cleanup of the client_hdev used to intercept hidraw access could be scheduled for deferred work reattachment. The previous cleanup order...

CVE-2025-21989

CVE-2025-21989 - Linux kernel (drm/amd/display, AMDGPU) The vulnerability stems from a missing .is_two_pixels_per_container function in dce60_tg_funcs when the AMDGPU driver loads with amdgpu.dc=1 (starting with kernel 6.11). This can cause a NULL pointer dereference on older GPUs (e.g., R9 280X)...

CVE-2025-22017

Technical details about CVE-2025-22017 are not provided in the connected documents. Public information in the initial description is limited to a Linux kernel fix in devlink/xa_alloc_cyclic. Monitor for updates from authoritative advisories.

CVE-2025-22023

CVE-2025-22023 concerns the Linux kernel USB xHCI driver. The issue arises from not skipping missed isochronous TDs when handling Stopped/Stopped-Length-Invalid events, causing the ring to potentially stall and the affected TDs to be cancelled incorrectly. A patch (commit d56b0b2ab142) introduced...

CVE-2025-22032

CVE-2025-22032 affects the Linux kernel wifi driver (mt76/mt7921). The vulnerability stems from mt792x_rx_get_wcid dereferencing an uninitialized deflink because it isn’t correctly linked to the sta context, causing a kernel NULL pointer dereference and a subsequent panic. A patch fixes the linka...

CVE-2025-23160

CVE-2025-23160 affects the Linux kernel on Mediatek platforms with a system companion processor (SCP). The issue is a resource leak in the Media subsystem (vcodec) during firmware initialization when the mtk_scp structure is not properly freed, leading to a leak if firmware initialization allocat...

CVE-2025-37901

The CVE-2025-37901 issue affects the Linux kernel irqchip/qcom-mpm driver. On Qualcomm chipsets, some GPIOs are not wake-capable and lack a corresponding MPM pin; the IRQ domain hierarchy is still applied unless explicitly disconnected. This caused crashes when setting up interrupts for non-wake ...

CVE-2025-37916

CVE-2025-37916 concerns the Linux kernel pds_core component. The issue is a use-after-free caused by a write-after-free of client_id in pdsc_auxbus_dev_del during stress testing, leading to a KFENCE reported bug chain. The fix removes the offending write-after-free by eliminating the client_id cl...

CVE-2025-38086

CVE-2025-38086 involves a Linux kernel vulnerability in net/ch9200 where mii_nway_restart() can trigger an uninitialised access through ch9200_mdio_read() due to not checking control_read() return value. The bug stems from an uninitialised local buffer (buff) being accessed when control_read() do...

CVE-2025-38193

CVE-2025-38193 affects the Linux kernel net_sched SFQ (sch_sfq). The issue is a missing range check on perturb_period, which can enable a race condition; patches fix perturb_period overflow/invalid values. Public demonstrations show negative, oversized, and a valid perturb value (2000000), with t...

CVE-2025-38268

CVE-2025-38268: In the Linux kernel, a deadlock window existed in the USB Type‑C/TCPM Alt Mode interaction due to an unprotected state check in tcpm_queue_vdm_unlocked, which could allow the Alt Mode driver to grab the TCPM lock while state changes occurred. The fix moves tcpm_queue_vdm_unlocked ...

CVE-2025-38371

CVE-2025-38371 affects the Linux kernel DRM v3D component on Raspberry Pi; the issue occurs when an interrupt is triggered during GPU reset, potentially causing GPU hangs and a kernel NULL pointer dereference. The fix is to disable interrupts before resetting the GPU. The openSUSE/SUSE references...

CVE-2025-38476

Mode C: The CVE-2025-38476 entry concerns a use-after-free in the Linux kernel’s rpl_do_srh_inline function (IPv6 RPL handling). The issue arises from accessing ipv6_hdr(skb) after skb_cow_head(), which could free the header. The fix converts the header reference to a local struct (oldhdr) instea...

CVE-2025-38479

CVE-2025-38479 affects the Linux kernel dmaengine/fsl-edma remove path on i.MX platforms. The root cause was a missing check for txirq/errirq, which could trigger a kernel dump (Warning: devm_free_irq) on i.MX9. The fix adds a txirq/errirq check to prevent the warning and ensure proper irq releas...

CVE-2025-38488

The CVE-2025-38488 issue affects the Linux kernel SMB client (smb: client) where use-after-free occurs in crypt_message() when hardware crypto accelerators perform asynchronous AEAD operations. The root cause was the removal of asynchronous crypto handling (assuming synchronous crypto), causing c...

CVE-2026-52991

CVE-2026-52991 concerns a race in the Linux kernel PSI subsystem where a use-after-free can occur due to a race between pressure_write and cgroup file release touching the priv member of struct kernfs_open_file. The issue is fixed by widening the scope of the cgroup_mutex in pressure_write to cov...

CVE-2008-0598

CVE-2008-0598 affects the Linux kernel 2.6.9, 2.6.18 (and likely other versions) via the 32-bit/64-bit emulation. The issue allows local attackers to read uninitialized memory through crafted binaries, indicating a local, unauthenticated attack with LOW complexity and complete confidentiality imp...

CVE-2009-2903

The CVE-2009-2903 entry concerns a memory leak in the Linux kernel appletalk subsystem. When the appletalk and ipddp modules are loaded but the ipddp device is not found, remote attackers can trigger memory consumption leading to a denial of service. The issue affects 2.4.x up to 2.4.37.6 and 2.6...

CVE-2009-3939

CVE-2009-3939 affects the Linux kernel megaraid_sas driver: the poll_mode_io file has world-writable permissions in kernel 2.6.31.6 and earlier. This enables local users to change the driver I/O mode by modifying the file. The description notes local access and manipulation of driver behavior, wi...

CVE-2010-1437

CVE-2010-1437 is a race condition in the Linux kernel’s keyring handling (find_keyring_by_name in security/keys/keyring.c) affecting version 2.6.34-rc5 and earlier. A local user can exploit this via keyctl session commands that access a dead keyring being deleted by key_cleanup, leading to memory...

CVE-2010-4160

The CVE-2010-4160 issue is present in the Linux kernel before 2.6.36.2, involving multiple integer overflows in the PPPoL2TP and IPoL2TP sendmsg paths (pppol2tp_sendmsg and l2tp_ip_sendmsg). The vulnerability can allow local users to trigger a denial of service through heap memory corruption and ...

CVE-2011-1593

CVE-2011-1593 affects the Linux kernel before 2.6.38.4, where multiple integer overflows in the next_pidmap function (kernel/pid.c) allow a local user to crash the system via crafted getdents or readdir calls. The connected advisories confirm the affected component and the root cause (integer ove...

CVE-2012-2319

CVE-2012-2319 refers to multiple buffer overflows in the Linux kernel’s hfsplus filesystem implementation, exploitable locally to gain privileges via a crafted HFS+ filesystem. Affected: Linux kernel before 3.3.5. Root cause: buffer overflow in hfsplus code (related to CVE-2009-4020). Impact, as ...

CVE-2012-2745

CVE-2012-2745 affects the Linux kernel prior to 3.3.2. The copy_creds function in kernel/cred.c may provide an invalid replacement session keyring to a child process, allowing local users to cause a denial of service (panic) via a crafted fork. Affected: Linux kernel

CVE-2012-3430

CVE-2012-3430 : In the Linux kernel before 3.0.44, the function rds_recvmsg in net/rds/recv.c fails to initialize a structure member, allowing a local attacker to read potentially sensitive kernel stack memory via recvfrom or recvmsg on an RDS socket. Impact: information disclosure. Affected: Lin...

CVE-2012-6544

CVE-2012-6544 affects the Linux kernel Bluetooth stack prior to 3.6. The issue arises from improper initialization of certain structures in the L2CAP/HCI paths, enabling a local attacker to read sensitive data from kernel stack memory via a crafted application. MiracleLinux AXSA-2014-258 (kernel-...

CVE-2013-0914

The CVE-2013-0914 issue affects the Linux kernel (before 3.8.4) where the function flush_signal_handlers in kernel/signal.c preserves the sa_restorer field across an exec. This behavior enables local users to bypass ASLR via a crafted application using sigaction. Exploitation details are not prov...

CVE-2013-1796

CVE-2013-1796 affects the Linux kernel KVM MSR_KVM_SYSTEM_TIME handling: the kvm_set_msr_common path in arch/x86/kvm/x86.c does not ensure time_page alignment for MSR_KVM_SYSTEM_TIME when the kernel is

CVE-2013-7266

CVE-2013-7266 affects the Linux kernel code path in drivers/isdn/mISDN/socket.c up to version 3.12.3. The function mISDN_sock_recvmsg does not consistently validate length against the related data structure, enabling local attackers to read kernel memory via (1) recvfrom, (2) recvmmsg, or (3) rec...

CVE-2013-7270

The CVE-2013-7270 issue affects the Linux kernel prior to 3.12.4, where packet_recvmsg in net/packet/af_packet.c updates a length value before initializing an associated data structure. This can enable local attackers to read kernel memory via recvfrom, recvmmsg, or recvmsg. Remediation is to upg...

CVE-2014-0155

The CVE-2014-0155 entry concerns the Linux kernel up to 3.14.1, where the ioapic_deliver function in virt/kvm/ioapic.c does not properly validate the return value of kvm_irq_delivery_to_apic. This can allow a guest OS user to trigger a host OS denial of service (host crash) via a crafted entry in...

CVE-2014-1438

The CVE-2014-1438 entry concerns the Linux kernel prior to 3.12.8 on AMD K7/K8 platforms. The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h does not clear pending FPU exceptions before an EMMS instruction, enabling local users to cause a denial of service (task kill) or pot...

CVE-2014-1445

Technical details for CVE-2014-1445 are not publicly provided in the supplied documents. The initial description contains core details, but no additional technical specifics are found in connected documents. Monitor for updates.

CVE-2014-4014

The CVE-2014-4014 issue is a Linux kernel local privilege escalation affecting versions before 3.14.8. The root cause is that namespaces are inapplicable to inodes, allowing a local user who creates a user namespace to bypass chmod restrictions by setting the setgid bit on a file with root group ...

CVE-2014-8172

CVE-2014-8172 affects the Linux kernel prior to 3.13, where files list handling uses an inappropriate locking approach around Asynchronous I/O (AIO). This local-denial-of-service flaw can cause soft lockups or a system crash. The available documentation confirms the vulnerability and its local at...

CVE-2016-2548

CVE-2016-2548 affects the Linux kernel’s sound/core/timer.c prior to 4.4.1. The issue arises because the kernel may retain certain linked lists after a close or stop action (snd_timer_close and _snd_timer_stop), enabling a local attacker to trigger a denial-of-service (system crash) via a crafted...